Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GIxloe13KxQe23L0oA7f_KWThRM.roa
File:                     GIxloe13KxQe23L0oA7f_KWThRM.roa (raw, json)
Hash identifier:          uPHq7C+g+3jplsZf7fzuVxNSsqqcFb+7PKPJjJU3OJ4=
Subject key identifier:   18:8C:65:A1:ED:77:2B:14:1E:DB:72:F4:A0:0E:DF:FC:A5:93:85:13
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1338
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GIxloe13KxQe23L0oA7f_KWThRM.roa
Signing time:             Wed 29 Sep 2021 02:55:29 +0000
ROA not before:           Wed 29 Sep 2021 02:55:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4662
IP address blocks:        122.100.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4920 (0x1338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:29 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=188C65A1ED772B141EDB72F4A00EDFFCA5938513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:57:7b:0a:16:f3:64:cf:98:3f:46:6a:32:
                    e0:44:43:3e:1b:c6:23:e1:b7:7f:c5:a6:55:84:17:
                    72:c0:ae:d2:c2:4d:e4:d0:c6:b0:92:39:1b:5b:9b:
                    f8:85:14:5c:2c:6d:a3:73:e6:6f:40:5e:24:c7:b2:
                    96:b7:61:2a:ee:7f:19:25:4a:5b:d4:ce:24:8a:0c:
                    7a:16:d4:44:19:99:f9:6b:f5:98:3d:21:a4:95:9a:
                    67:e0:99:eb:9a:12:b6:b8:42:4d:12:fa:5f:36:09:
                    61:9c:c1:b4:92:42:4f:d6:d0:b1:5a:5a:aa:db:79:
                    b8:da:15:ed:71:13:fa:f6:a6:54:4b:0f:76:f3:5a:
                    2b:33:9e:51:4c:df:5e:b9:98:21:0f:2c:b0:ec:06:
                    cc:b0:a3:5c:4f:e1:ab:be:19:b3:36:da:b3:79:29:
                    f1:4a:33:fd:3b:bf:ec:d6:23:28:be:29:ad:1b:ca:
                    f8:dd:1a:91:57:db:4d:01:ad:4f:61:c0:86:4b:a4:
                    8b:fa:0f:d9:70:f1:28:3f:5f:d2:9b:c3:98:2f:4c:
                    8c:06:cf:0f:e7:9b:82:0e:f6:e7:da:15:05:41:db:
                    15:f2:d4:cb:75:0d:6a:e4:4e:18:69:aa:36:d9:78:
                    37:b2:fd:fc:42:73:de:c4:3d:2b:2a:46:54:b1:e2:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8C:65:A1:ED:77:2B:14:1E:DB:72:F4:A0:0E:DF:FC:A5:93:85:13
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GIxloe13KxQe23L0oA7f_KWThRM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:82:a1:3e:63:7e:05:03:0b:d9:41:b2:d0:e5:ef:f6:b8:
         17:be:3f:22:53:4c:2e:55:56:63:6f:8b:0d:58:72:cd:80:a0:
         b3:cd:23:e1:39:35:63:1c:c9:e9:97:e3:ae:e0:c6:99:25:aa:
         ed:72:84:40:59:52:ac:f9:e2:54:0b:a4:04:72:e9:97:3d:50:
         ba:03:49:f3:aa:f4:d5:58:f4:e4:f8:81:69:06:60:8d:7b:d3:
         9b:9a:0a:4a:1d:77:de:d9:d7:bb:c8:27:d7:69:09:99:17:87:
         d3:ff:0e:f9:48:d5:0e:ae:0e:60:e2:ff:ea:7f:ae:5f:a6:52:
         84:ad:3c:a8:83:3f:c3:18:f1:63:08:f8:a0:70:e2:c6:db:a6:
         c1:94:5a:07:31:b4:d5:15:88:b1:0a:78:0b:b1:12:32:a1:39:
         5a:50:f2:fc:10:c5:d2:19:04:7a:5c:c5:fa:4a:b1:87:e8:3c:
         74:0e:b0:09:a8:fc:22:a0:04:9a:11:6d:93:7c:03:ec:90:50:
         07:68:53:5d:bb:bb:8a:e0:0f:69:6b:67:ca:a2:2a:81:b8:58:
         02:f5:c1:08:01:d4:5b:f0:8d:68:3a:55:45:91:39:a2:a1:4c:
         e5:bd:40:ee:31:73:e8:37:1d:a8:7b:fd:8d:e8:de:82:40:e3:
         cd:85:7d:49
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MjlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDE4OEM2NUExRUQ3NzJC
MTQxRURCNzJGNEEwMEVERkZDQTU5Mzg1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhy1d7ChbzZM+YP0ZqMuBEQz4bxiPht3/FplWEF3LArtLCTeTQ
xrCSORtbm/iFFFwsbaNz5m9AXiTHspa3YSrufxklSlvUziSKDHoW1EQZmflr9Zg9
IaSVmmfgmeuaEra4Qk0S+l82CWGcwbSSQk/W0LFaWqrbebjaFe1xE/r2plRLD3bz
WisznlFM3165mCEPLLDsBsywo1xP4au+GbM22rN5KfFKM/07v+zWIyi+Ka0byvjd
GpFX200BrU9hwIZLpIv6D9lw8Sg/X9Kbw5gvTIwGzw/nm4IO9ufaFQVB2xXy1Mt1
DWrkThhpqjbZeDey/fxCc97EPSsqRlSx4kAzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGIxloe13KxQe23L0oA7f/KWThRMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0dJeGxvZTEzS3hRZTIzTDBv
QTdmX0tXVGhSTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6
ZEAwDQYJKoZIhvcNAQELBQADggEBAIHCgqE+Y34FAwvZQbLQ5e/2uBe+PyJTTC5V
VmNviw1Ycs2AoLPNI+E5NWMcyemX467gxpklqu1yhEBZUqz54lQLpARy6Zc9ULoD
SfOq9NVY9OT4gWkGYI1705uaCkodd97Z17vIJ9dpCZkXh9P/DvlI1Q6uDmDi/+p/
rl+mUoStPKiDP8MY8WMI+KBw4sbbpsGUWgcxtNUViLEKeAuxEjKhOVpQ8vwQxdIZ
BHpcxfpKsYfoPHQOsAmo/CKgBJoRbZN8A+yQUAdoU127u4rgD2lrZ8qiKoG4WAL1
wQgB1FvwjWg6VUWROaKhTOW9QO4xc+g3Hah7/Y3o3oJA482FfUk=
-----END CERTIFICATE-----